Focus 1
Cookie consent
Explains what triggers consent requirements and what consent before cookies means in practice.
Framework hub
ePrivacy
ePrivacy focuses on cookies, terminal equipment, electronic communications, and consent practices.
EU baseline
If you are established in the EU, operate in the EU, or place this product or service on the EU market, treat this as a first-order compliance check. Non-EU reach language means outsiders can also be covered, not that EU companies are outside scope.
Review scopeFocus 2
Regulator positions
Tracks CNPD, ICO, CNIL, and EDPB positions on cookie interfaces and consent management.
Focus 3
Luxembourg layer
Luxembourg-specific CNPD cookie guidance has a dedicated page.
Open related pageSource updates
URGENTFederal Register2026-09-29
Sunshine Act; Open Commission Meeting Wednesday, September 30, 2026
The Commission will consider a Report and Order and Further Notice of Proposed Rulemaking to overhaul the Commission's outdated National Environmental Policy Act (NEPA) rules.
US federal regulationDORAePrivacy
MEDIUMFederal Register2026-09-28
Notice of Determinations; Culturally Significant Objects Being Imported for Exhibition-Determinations: “With Full Consent,” Exhibition
Notice is hereby given of the following determinations: I hereby determine that certain objects being imported from abroad pursuant to an agreement with their foreign owner or custodian for...
US federal regulationePrivacy
MEDIUMFederal Register2026-09-24
Proposed Consent Decree; Clean Air Act Citizen Suit
In accordance with the Clean Air Act, as amended (CAA or the "Act"), notice is given of a proposed consent decree in Center for Biological Diversity and Center for Environmental Health v.
US federal regulationePrivacy
URGENTEDPB2026-09-23
The Irish Data Protection Commission fines Google EUR 403 000 000 following Inquiry into Google’s processing of location data
Background information Date of final decision: 21 September 2026 National case Legal Reference(s): Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of...
GDPRePrivacyEU AI ActDORA
URGENTEDPB2026-09-23
The Irish Data Protection Commission fines Google 403 000 000 EUR following Inquiry into Google’s processing of location data
Background information Date of final decision: 21 September 2026 National case Legal Reference(s): Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of...
GDPRePrivacyEU AI ActDORA
URGENTEDPB2026-09-22
The Spanish DPA fined Securitas Direct EUR 100 000 for making the exercise of data subject rights more difficult by directing individuals to a chargeable telephone number
Background information Date of final decision: 1 February 2023 National case Controller: SECURITAS DIRECT, S.A.
GDPRePrivacy
URGENTEDPB2026-09-22
The Spanish DPA fined Securitas Direct 100 000 EUR for making the exercise of data subject rights more difficult by directing individuals to a chargeable telephone number
Background information Date of final decision: 1 February 2023 National case Controller: SECURITAS DIRECT, S.A.
GDPRePrivacy
HIGHFederal Register2026-09-22
FleetCor Technologies; Analysis of Proposed Consent Order To Aid Public Comment
The consent agreement in this matter settles alleged violations of Federal law prohibiting unfair or deceptive acts or practices.
US federal regulationePrivacyFTC privacy